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SUMMARY 


Technical  Problem 

The  ARPA  Contract  with  the  Network  Analysis  Corporation 
involves  the  analysis  and  design  of  the  ARPA  Computer  Network 
and  the  study  and  properties  of  networks  of  this  type.  During 
the  reporting  period  the  technical  problems  considered  were  the 
general  problem  of  network  reliability,  the  reliability  analysis 
of  the  ARPA  Network,  the  relationship  between  cost  and  throughput 
in  store- and- forward  systems,  and  the  optimisation  of  the  growth 
of  the  ARPA  network. 

General  Methodology 

The  approach  to  the  reliability  problem  is  to  combine  a  number 
of  analytical  and  combinatorial  results  with  computer  simulation 
schemes  to  derive  several  powerful  procedures  for  reliability 
analysis.  These  procedures  were  then  used  to  examine  the  ARPA 
Network  reliability  problem  in  detail.  In  the  area  of  cost- 
throughput  trade-off,  the  computer  network  optimization  programs 
which  have  been  under  continuous  development  were  used  to  derive 
estimates  for  optimum  performance  for  specific  network  studies 
such  as  ARPA  Network  growth,  design  of  large  store-and- forward 


networks,  and  the  study  of  local  distribution  schemes. 

Technical  Results 

A  number  of  important  technical  results  were  derived  during 
the  reporting  period: 

1.  Reliability  analysis  methods  that  are  more  than  1000 
times  more  efficient  than  conventional  schemes  were  developed. 

2.  The  ARPA  Network  was  shown  to  be  highly  reliable  with 
respect  to  node  and  link  failures. 

3.  Cost  and  throughput  characteristics  were  determined 
for  a  200-node  store- and- forward  network.  These  characteristics 
extend  the  results  of  our  previous  study  of  large  networks  which 
showed  that  such  networks  are  economical  to  operate  using  the 
present  technology  of  the  ARPA  Network. 

Department  of  Defense  Implications 

The  Defense  Department  has  vital  need  of  highly  reliable 
and  economical  communications.  The  additional  cost- throughput 
data  substantiate  our  earlier  conclusion  (see  Second  Semiannual 
Report)  that  large  computer  communication  networks  can  supply 
rapid  and  economical  means  for  resource  sharing  and  communications. 
The  reliability  studies  provide  the  first  step  in  guaranteeing 
that  these  networks  will  be  highly  reliable  and  survivable. 
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Implications  for  Further  Research 


The  high  efficiency  of  the  new  reliability  analysis 
methods  makes  it  possible  for  the  first  time  to  examine  a 
number  of  analysis  and  design  problems  that  were  heretofore 
intractable.  Research  is  now  progressing  to  complement  the 
economic  studies  of  large  systems  with  detailed  studies  of  their 
reliability. 
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GENERAL  NETWORK  RELIABILITY  ANALYSIS 


1.1.  INTRODUCTION 

We  are  concerned  with  a  network  in  which  the  nodes  and 
(undirected)  links  are  in  either  a  failed  or  an  operative  state. 

(We  allow  no  intermediate  states.)  Two  nodes  can  communicate  _i 
there  is  an  alternating  sequence  of  operative  nodes  and  links 
starting  with  one  of  the  two  nodes  and  ending  with  the  other 
such  that  each  link  in  the  sequence  appears  between  its  end  nodes. 
We  use  as  a  measure  of  the  networks  inability  to  support  communi¬ 
cation  the  percent  of  node  pairs  which  are  not  able  to  communicate. 
In  Figure  1.1.1  the  failed  link  (2,  5)  and  two  failed  nodes  1, 
and  5  are  indicated  by  X's.  The  only  pair  which  can  communicate 
is  2,3. 

1 

Figure  1.1.1 

The  number  of  node  pairs  in  the  net  is  (5)  (4)/2  =  10.  Nine 

of  these  do  not  communicate;  thus,  our  measure  of  the  network's 
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inadequacy  is  9/10.  It  is  sometimes  convenient  to  use  a  simpler 
criterion.  We  say  the  network  has  failed  if  it  is  disconnected; 
i.e.,  if  there  exists  any  node  pair  which  cannot  communicate. 

We  now  turn  to  the  case  where  the  links  and  nodes  fail  with 
some  known  probability.  There  are  two  essentially  equivalent  in¬ 
terpretations  of  the  situation.  The  first  case  is  when  a  “cata¬ 
strophic"  event  occurs.  For  example,  some*  natural  disaster  such 
as  an  earthquake  or  hurricane  can  cause  the  nodes  and  links  to 
be  knocked  out  with  some  probability.  One  can  then  ask  what  is 
the  expected  number  of  node  pairs  which  can  communicate  if  this 
event  should  occur.  In  the  case  of  the  second  criterion,  one 
would  ask  what  is  the  probability  the  net  will  fail  as  a  result 
of  the  event?  The  second  interpretation  is  that  the  links  or 
nodes  fail  and  are  repaired  independently  according  to  some 
stationary  random  process.  We  assume  that  the  average  time  each 
node  or  link  is  operational  is  known  and  that  it  is  equal  to  the 
probability  of  the  node  or  link  being  in  the  operative  state  at 
any  given  time.  in  this  case,  the  expected  number  of  node 
pairs  not  communicating  can  be  interpreted  as  the  time  average 
of  pairs  not  communicating.  The  second  criterion  yields  the 
percentage  of  the  time  the  network  is  in  a  failed  state. 
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If  all  the  elements  of  the  network  which  can  fail  have  the 
same  probability  of  failing, then  combinatorial  analysis  methods 
can  be  useful.  In  the  general  case,  a  combination  of  analysis 
an d  simulation  seems  to  be  the  most  useful  approach.  We  will 
first  consider  several  special  cases.  In  Section  2,  we  consider 
the  case  of  infallible  nodes  and  links  with  equal  failure  proba¬ 
bilities.  This  leads  to  strictly  combinatorial  analysis.  In 
Section  3,  we  indicate  our  method  for  determining  the  components 
of  a  graph.  This  is  not  the  usual  method  but  turns  out  to  be 
convenient  for  our  application.  In  Section  4,  we  apply  simulation 
in  the  case  where  no  node  failures  are  allowed  but  where  the  link 
failure  probability  can  differ  from  link  to  link.  The  i  ethod 
described  is  particularly  useful  when  the  network  is  to  be  ana¬ 
lyzed  for  a  wide  range  of  link  failure  probabilities.  In  Section  5, 
a  second  method  is  described  which  combines  the  combinatorial 
methods  of  Section  2  with  simulation  to  analyze  networks  with  in¬ 
vulnerable  nodes.  Sections  6  and  7  give  the  modifications  re¬ 
quired  to  the  methods  in  Sections  4  and  5  respectively  to  apply 
them  zo  networks  with  failing  nodes  and  links. 
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•  COMBINATORIAL  ANALYSIS  OF  NETWORKS  WITH  EQUAL  LINK 
RELIABILITIES  AND  PERFECTLY  RELIABLE  NODES 

The  combinatorial  analysis  of  networks  with  equal  proba¬ 
bilities  of  link  failures  and  perfectly  reliable  nodes  is  based 
on  the  work  of  Moore  and  Shannon  [1956]  on  building  reliable 
switching  networks  out  of  unreliable  components.  We  will  define 
the  Moore-Shannon  Function  (MSP)  to  be  the  function  h(p)  that 
gives  the  probability  of  the  net  being  disconnected  as  a  function 
of  the  probability  p  of  a  link  failing.  The  function  a (p)  =  1  - 
h(p),  which  gives  the  probability  the  net  is  connected,  will  be 
called  the  availability  function  for  the  net.  Suppose  there  are 
NS  links  in  the  net  and  let  q  =  1  -  p.  Then  there  are  (^B)  ways 
that  exactly  N3-k  of  the  links  can  fail.  Fach  of  these  events 
has  the  same  probability  p  <3  of  occurring.  Thus,  if  we  let 
C  (k)  be  the  number  of  ways  exac  cly  k  remaining  links  can  result  ' 
in  a  disconnected  net,  we  have  •  , 

NB 

h(p)  =  c(k)  pNB-k  qk  (1) 

!  , 

We  also  can  define  N(k)  to  be  the  numbe^^bi^ways  k  links  can  form . 

NB 

a  connected  net.  Clearly,  C(k)  +  N(k)  =  (\  ) .  Thus,  the  avail¬ 
ability  problem  "reduces"  to  the  combinatorial  problem  bf  deter¬ 
mining  how  many  ways  k  links  can  result  in  a  disconnected  subnet. , 


4. 


A  priori,  we  can.  also  say  some  tiling  more  about  the  form  of  (1). 
If  the  network  has  NN  nodes,  it  takes  at  least  NN-1  links  to 
connect  them.  Thus 


N(k)  =  0.  k=0, 1,  .  ..,  NN-2 

and 

C(k)  =  (^3)  k=0,l,  ....  NN-2 


Similarly,  if  we  know  the  minimum  number  of  links  "c"  which  must 
be  deleted  to  disconnect  the  network,  we  have 

C (N3-k)  =0  k  =  0,  1,  . ..,  c-1. 


If  the  network  is  initially  disconnected  c  =  0. 

In  many  applications  c  is  quite  small?  for  example,  in 
the  various  versions  of  the  ARPA  Computer  Network,  c  =  2.  (See 
Chapter  2 . ) 


Thus,  there  are  only  N3-NN-C+2  non- trivial  terms  in  (1) . 
This  immediately  gives  us  bounds  on  h  (p) . 


Tnese 


,N3,  k 
{k  ]  P 


X3— XN  -f  2  k—  C 

bounds  are  apparently  due  to  Jacobs 
,  the  last  non-zero  term  in  (1) 


(?)  Pk  q“-x 


(2) 


[1959] .  If  p  is  very 


d  . 


close  to  0 


determines  the  behavior 


of  h(p).  The  last  non-zero  term  is  C(NB-c).  Similarly,  if  p  is 
very  close  to  1,  the  first  non-zero  term  in  (1)  dominates.  This 
terra  C(NN-l)  is  simply  minus  the  number  of  trees  in  aha 

network.  C{N3-c)  can  quite  often  be  obtained  easily  by  inspection 
and  the  number  of  trees  can  be  obtained  by  the  formula  [Seshu  and 
Reed;  1961,  p.  157]  : 

No.  of  trees  =  determinant  (UU  w) 

where  U  is  the  reduced  incidence  matrix  of  the  network. 

We  then  get  the  approximation 


V  k  m  fc  NB-k 
>  (v  )  p  q  +  c 


k=  N3-NN+2 


N-l)  pNB-SN+1  q®*-1 


=  h(p)£ 


S3 


NB-C 


C(X3-C)  Pc  q'“  “  +  Y"'  (S3)  pk  qNB"k- 

z _ ^  * 

k=c+  1 


The  lower  bound  is  sharp  for  p  close  to  1  and  the  upper 
bound  for  ?  close  to  0.  The  bounds  given  in  (3)  can  be  further 
improved  by  using  the  fact  that  if  a  given  subset  of  k  links 
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discennccu  eke  grap;4,  any  larger  subset  containing  the  first 
will  also  ^ic connect  the  graph.  Similarly#  if  a  subset  of  links 
is  a  connected  subgraph  of  the  network  so  is  any  subset  containing 
it.  This  can  be  used  to  project  lover  bounds  for  C(k‘)  given 
C  v k )  for  k>  k* .  Similarly  upper  bounds  can  be  obtained  for 
C  x 1  j  given  C  (x )  tor  k  >  k *  . 

Cne  very  general  way  to  carry  this  out  can  be  based  on  a 
powerful  theorem  by  J.  B.  Kruskal  [1963] .  Kruskal  defines  an 
abstract  c cam  lex  to  be  a  finite  set  of  points  together  with  a 
class  of  subsets  with  the  subset  closure  property;  that  is,  if 
a  subset  belongs  to  the  class,  then  so  do  all  its  subsets.  For 
any  non-negative  integer  n  he  defines  its  r-canonical  reoresenta- 
ticn  to  be  (nr,  . ..,  n^)  where 


n  =  (  r*  ) 


(nr  -X ) 
'  r-1  ' 


(4) 


and  we  first  choose  nr  as  large  as  possible  so  that  (^ )  In 
then  v:e  choose  nr_y  as  large  as  possible  so  that  (^r)  +  pr-O.)  £  n 
and  so  on  until  equality  is  achieved.  Then  for  r  f  r  ‘ ,  he  deifies 
f[n;  r,  r  ‘  )  to  be  the  greatest  number  of  r  ‘  -sets  that  occur  ~n 
any  complex  having  precisely  n  r-sets.  If  r>  r‘#  he  defines 
f  'n  ;  r#  r ! )  eo  be  the  smallest  number  of  r 1 -sets  that  occur  in 
any  complex  having  precisely  n  r-sets. 
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The  result  we  are  interested  in  is  Kruskal 1 s  theory 
Theorem  1.  If 

Nfr  • 

n  =  (“  )  +  ...  (Ki)  is  canonical, 
r  i 


the: 


f  (n;  r,  r')  =  (nr)  +  (nr-l  )  +...+  (”i  ) 

r'  r-l  r  -r  + 


(5) 


with  the  conventions  that 


(q)  =  0,  (g)  =  0  for  m  <  0  or  k  <  0,  or  m < k. 

If  a  subnetwork  with  k  links  is  disconnected,  then  a  sub¬ 
network  with  only  k'  (for  k‘  <  k)  of  the  k  links  will  also  be 
disconnected . 

Thus  Kruskal's  theorem  gives  us  the  following  inequality: 


C(k')  £  f(C(k);  k,  k‘)  for  k£k‘. 


(6) 


Similarly, 


C (k* )  <  f(C(k);  k,  k‘ )  for  k  £  k' .  (7) 

Relations  (6)  and  (7)  as  very  useful.  For  each  c  (k)  that  we  can  calculate  (or  for 
that  matter  even  get  bounds  on) ,  we  can  get  bounds  on  the  remaining 
C(k').  In  practice,  one  is  usually  concerned  with  a  loosely- 
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net  (c  small;  with  a  low  probability  of  link  failure. 

:k  Cv.ooo,  ono  can  exactly  determine  the  first  few  of  the 
C  (bb-c )  C (X2-C-1 ) ,  ...  (if  necessary  by  enumeration) , 
ivU'.  derive  lower  bounds  for  the  remaining  co-efficients 
(C)  .  this  yields  a  very  good  lower  estimate  for  h (p)  for 
1.  Coed  upper  bounds  on  the  coefficients  are  more  diffi- 
o  d~ carmine.  C  (h'N-l)  ,  which  is  )  ninvs  the  number  of 

can  be  calculated  by  formula  and  upper  bounds  for  the 
for  k>  bN-I  arrived  at  by  (7).  Unfortunately,  the  terns 
are  most  important  for  small  p  are  the  ones  for  which  the 
*ces  from  (7)  are  least  accurate. 

;ho  escimates  for  C(k)  implied  by  (6)  and  (7)  are  based 
/  on  the  fact  that  if  a  network  is  disconnected  with  one 
of  operative  links,  it  is  also  disconnected  for  any  subset 
'The  bound  cakes  into  account  no  other  structure  of  the 
cm.  (net  oven  the  number  of  links  as  long  as  N3  is  sufficient 
)  .  be  now  establish  that  while  the  bounds  are  sharp  for  com 
j ,  obey  are  not  for  network  reliability  problems.  We  will 
is  in  a  sar.owr.at  indirect  way  in  order  to  also  develop  some 
nor*'  for  later  use. 
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(Mi)  Xo  member  of  J  is  a  proper  subset  of  another . 
v  e-,  -p  O') ,  C  ■;  e_  h”  /  v-»o  w  s  /  e C-  e  t  uo  a  no.  o^r—  Ci 

*  **  «i»  ^  -A-  4m  ^  u. 

then  there  exists  Co  hr  such  that  02  £  €3  c c  (Cp  -j  C0 )  - 

We  are  interested  in  raatroids  because  of  the  fell 
Theorem  2:  Let  j  be  the  family  of  all  minimal*  link  c 
of  a  graph  P  with  links  S.  <C  S,  //  is  a  matroid. 
freer;  By  definition,  no  member  of  o'  is  a  proper  subs 

T  T 

another  member.  Suppose  ,  c9£/  e-,  C  C2#  e 

We  prove  first  that  C-,  U  C9  -  /  e-^J  disconnects  P  . 
the  nodes  into  two  connected  sets  and  A2,and  C2  par 
nodes  into  two  connected  sets  and  B2 .  Suppose  - 
(i.e.,  connects  node  to  node  n-j_)  .  Without  loss 
we  can  assume  m^^  A^,  B-, ,  n^d.  A0/  B2. 


“/.lining  is  exactly  two.  For  if  there  were  at  least  3,  say 
3-  /  $2*  £3,  then  there  must  be  two  links  in  C3  which  connect 

D;/  D*-,  and  D3  since  the  graph  was  originally  connected.  Only 
one  cf  these  two  links  can  be  e9 .  Therefore,  the  other  can  be 
deleted  from  C3  thus  contradicting  its  minimality.  This  completes 
ana  preoz  or  tne  tneorem. 

Suppose  we  consider  (7)  for  k  -  2,  k‘  =  3  and  C (2 )  =  5. 

Then  v 7 }  yields  0(3) h  2.  We  now  show  that  there  exists  no  graph 

such  thru  the  number  of  connected  graphs  with  2  links  is  5  and 
with  3  links  is  2.  More  generally,  we  show  that  C(k)  r  2  for 

a_l  graphs  with  k  and  L\3  satisfying  pM3  >  k  >  1 .  This  follows 


directly  from  Theorem  2  and  defining  property  of  metre  id  c 

-*-<c  i  i>  ■  h  i  •  *  •  i  b .  '•  und  ii  —  ^  e  *  ,  » .  .  ,  vj-  •  no  wj. 

i.  i  x ;  t  —  x  ^ 


—  v 


-t  / 

t  i  1 


*  •  •  •  / 


£Rd  1'  C  NB-  k  )  be  the  links  rcsoV6d 

in  each  case.  The  total  number  of  elements  in  ‘ '  -  '  ' 

h  's2-kj  ana  2_  "  •••»  :co-ki  13  2N3_2k  *  1:3  sinc<i 

Thus  for  some  i , £  \  v ,  and  for  seme  j,  /j  .  n  >  since  3 

If  m-  and  y  define  minimal  cuts,  then  there  must  exist  a  t: 
minimal  cut  by  the  matroid  property  M2.  But  if  Y"  is  not  mir 

*  fc-w 

,  s—s  / 

tnere  exists^  c/,_f  which  is  minimal.  But  in  that  case  the 2 
would  be  more  than  two  sets*  S  with  jS|  =  NB-k  and  So  )  ^ 
On  the  other  hand,  consider  the  complex  defined  cn  the  point 
I,  2,  3,  4,  5,  6  with  3  sets  (4,  5,  6)  and  (3,  5,  6)  and  2 
(5,6),  (4,6),  (4,5),  (3,6),  (3,5).  These  achieve  the  equal! 

in  (7). 

This  leads  to  the  following  interesting  but  yet  unscl 


ira 


it*/ 


j 


problem: 

Lot\5, jf)he  a  matroid  and  let  f  be  the  family  of  all  sir^wi 
of  S  containing  a  set  in  y.  Given  there  are  C(k)  sets  in  ~- 
with  cardinality  k,  what  is  a  sharp  lower  bound  on  C(kl)  for  ■ 
h  ‘  i  k  and  a  sharp  upper  bound  for  C(k* }  for  k* i  k. 


rcpreser.ua  t. 


O  —  UiU„v..wL  _ 


'  0 


v.'CU— Cl  OQ 


Gi  course,  it  would  be  most  helpful  to  be  able  to  solve; 
l._b  J-  be  the  cut  eets  of  a  finite  graph  with  KB  links  and 
,0^5.  Given  there  are  C  (k)  cuts  with  cardinality  k,  what  is 
„rp  lower  bound  for  C (k1 )  for  k' >  k  and  what  is  a  sharp  upper 
d  _or  C  (k 1 )  for  k' <  k. 

It  should  be  pointed  out  that  Leggett  [1363]  gives  similar 
apparently  stronger  bounds  to  those  mentioned  hare.  However, 
proof  seems  inadequate.,  and  we  have  not  been  able  to  complete 


P  method  of  another  sort  due  to  FranK  [1970]  is  based  on  tne 
valent  tree  construction  of  Gomory  and  Hu  [1961] . 


-OA-0"i>.  Ini  maiiy,  the  numb of  components  is 

m‘  th°  aaa**f  °f  pairs  communicating  HP  is  0,  and  each  component 
contains  l  node* 

Ea°h  tise  we  raach  St®P  2,  we  combine  the  two  components, 
ti  «nu  t2  nocies  into  a  new  component  with  t^  +  t,  nodes. 
Also,  we  now  have  tx  x  t2  more  node  pairs  which  can  communicate. 

we  sec  iN*  =  K?+tl  •t2*  The  number  of  components  de¬ 
ny  i.  Note  that  we  can  save  computer  time  by  terminating 
tne  algorithm  wherever  the  network  becomes  connected;  that  is, 

V''“Sn  =  (XN-i)/2  or  equivalently  the  number  of  components  is  1 

nSXt  question  wa  examine  is  how  the  addition  or  deletion 
or  xir.ks  affects  the  connectivity  of  £  .  Assume  we  have  completed 
the  analysis  for  i?  -  <  ^  ,  ^  >  using  the  algorithm  above,  if 
we  c  iinx  to  4  yielding  the  link  set  ,  we  need  only 

repast  one  cycle  of  the  algorithm  to  complete  the  analysis  of  the 


«=—*.**%  •  -v 


ina  simplicity  of  this  operation  is  an  important 
V“^Ue  °=  ’c‘'*a  aAgorithm  *  However,  if  we  delete  a  link,  a,  from  ,4 
the  situation  is  more  difficult.  Suppose  a  =  (m,  n) .  jfecessaril; 

~G  in  -ne  same  component.  We  first  label  r.cde  m. 


we  bi'.c;;  all  nodes  connected  to  *** 


was  C. .  u.-tl  ■  2?s  *|  us  /s 


«  £  link  in  A  1  ~  n  -  ’>  a 

1  v  i. 


/s  r»  r  ^  *5-  ^ -5 


“O  a  labeled  node  by  a 
*“'*  *  *z  r*  ~£2C.tes  labeled,  the  connc  _  vity  situation 


,.=•!»!  |H' 


mice ion  me  tried  wo  arc 


4-  A  *• :  .-a  e* 


rice  acre  can  dq  usee 


rv  c'onorai  reliability  problems*  For  simplicity,  we 
r.t  it  in  its  sinolost  context.*  In  Section  1.6,  we 


re*  iizations . 


e  we  wish  to  apply  simulation  to  the  problem  of  ec¬ 
ho  expected'  number  of  pairs  communicating  in  a  network 


no  or on an 


ility  of  the  network  failing) . 


may  fail  with  probability  p  but  that  the  nodes  do  not 
re  a  a  s  cnono  wouia  be  to  cnccse  a  number  randomly  re— 

1  for  each  link.  If  the  number  is  less  than  p, 
removed;  otherwise  the  link  remains.  Then  we  deter- 


*•  r  of  nods  pairs  communicating.  We  then  choose 


of  random  numbers  and  compute  the  number  of  node 
nieating  and  so  on.  The  sample  average  obtained  ; 
u—c;  ~iv o  us  an  estimate  or  the  expected  number  or 


f*  A  a  t*  .orpr  •  <?  /a  v*  *  * 


in  Section  1.3.  for  computing 


xrmur.i eating,  with  little  extra  offer' 


of  expected  pairs  communicating 


hlitv  of  link  failure.  As  no tore,  we 


ror  e sen  _ir.x. 


U£ 
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1.6.  SIMULATION  METHOD  Is  UNkTI^AHIP  NC/>:S  _AKI 

W2  first  modify  the  method  aescnoed  m  bocu^on 
determining  the  components  of  a  network.  rrne  modxric^* 
required  to  handle  the  situation  where  nodes  can  fail.  Step  - 
new  becomes 

Step  1  *  ;  Add  a  link  to  A*  to  forra  /"f^i-  if  y\  hr  I  ~ 

—  ......  ■—  A. 

or  equivalently,  k+1  =  KB,  stop.  Otherwise,  suppose  ak  =  (-k,  ak 
Examine  rak  and  nk  and  if  either  one  is  inoperative,  or  ir  they 
have  the  same  labels,  repeat  Step  1‘  with  k:  =  k+l.  Ir  nor,  go 
to  Step  2. 

Similarly,  modifications  must  be  made  to  the  procedures  tor 
adding  or  subtracting  links.  To  add  £  node,  one  s amply  -ries 
add  all  the  operative  links  incident  co  the  node.  To  subtract 
a  node,  one  deletes  all  the  links  incident  to  the  node. 

With  the  above  modifications.  Simulation  Method  ±  ror  i.oae 
and  link  failures  is  very  similar  to  the  method  witnout  node 
failures.  To  begin,  we  make  all  the  nodes  and  links  inoperative 
and  assign  ail  the  redes  to  different  components.  We  tn^ 

MN  *r  N3  random  numbers.  The  node  or  link  corresponding  «~o  *-***= 
largest  of  these  is  made  operative  and  is  added  to  the  newer*. 
Then  the  node  or  link  corresponding  to  the  next  largest  ranaom 
number  is  introduced  and  so  on.  Tne  suc;t.i.s, — - —  co-a^*.^ 
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1.7.i  STMUI^TIQN  KSTIIOD  II;  aODB  LX^K  FAILURES 

!  *  1  ' 

.  .  .  _  I  „  .  .  .  _  - 

To  aaapt  Simulation  Hethca  II  to  n atworxs  witn  nodo  ana 

i .  ’  '  '  ■  1 

link  failures,  we  need  only,  re-define  the  strata.  In  this  case. 


1 


they*  are  defined  by  the  number  of  link  failing  an^  the  nurtber  of* 
nodes  failing.  Thus,  the  first  several  strata  are  defined  by  0 

i  .  t 

links  failed  -  0  nodes  failed,  1  link  failed  -  0  nodes  failed, 

«  ;  i  i  , 

*  '  >  1  f  ' 

0  links  failed  -  1  node  failed,  2 1  links  failed  -  0  nodes s failed, 

i  .*  ,  *  , 

1  link  failed* -  1  node  failed,  6  links  failed  -  2  nodes  failed 

»  *  .  1  t  i  !  1  , 

...  .  if  nodes  have  orobabilitv  p.4  of  failing  and  links  have 

l  ' 

.  1  I 

probability  pi  iof  failing,  a  network  wish  exactly  is  •  failed,  links 
•  5  .  *  ? 

and  r.  failed  nodes  has  probability 


1  _  n  ,,  ,  iftl-r.  m  \k3-x 

'  %'  U-%)  Pa  ^  , 

i  •*'  |  1  ’  »  .  I 

1  I  *  ‘  *  1  .  I  !  f 

of  <pc cur ring.  Proportional  random  sampling  can  oe  used  as  bercre. 

i  m  1  ,  t  i 

illustrate  fthe  procedure  for  the  network  defined  by  'Figure  ^ 
1.4.1.  Let  us  suppose  p^  =  .05,  and  we  wish  to  make  approximately 
100  samples.  The  probability  of  .-the  first  few  strata  nrs** 
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ho  case  where  nodes  do  not  fail,  some  of  the  strata  can 

yzed  explicitly  in  advance.  These  terras  of  course  do  not 

ute  to  the  variance  of  the  estimate.  For  our  example, 

lowing  strata  are  deuemaned  without  sampling,  ir  no 

ail  and  less  than  two  links  fail,  all  pairs  can  ccmmunic 

H9)  Vi 

ncae  raaas  and  no  ianxs  r«.a  1,  - ^ - —  if  ncus  pa«r^ * 

cate.  Such  networks  account  for  .358-h.226-r.i5ju  —  .  7jd  o 


babilisy.  There  remains  l.-.73o  =  265  to  be  accounted  f 
'ere  ai-.otaea  — ouO  samp—.  — s,  eii*—  v. vj  inu»enci  *uo2  -- 

red  ran  com.  semap  rang,  w‘-a  vrcuae  a  _i__lgc  are 


66  nets  v/atn  exactly  a  -an 


one  node  failure  and  1000  ^  101  to  the  13  n 

.  —  CO 

two  node  failures.  These  would  all  be  enumerated 
1000- {66*r96v28)=S10  samples  for  the  remaining  stra 
would  then  consider  strata  corresponding  to  networ 
exactly  three  elements  (links  or  nodes)  failing  an 
as  in  Section  1.5. 
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q.1 down  to  the  level  of  too  croc  of  no-neat  m — m  .  -  -  -  -# 
for  low  levels  of  unre liability  ^  i_-  ,11;  oho  imprevamta o  :  .  'not 

sigriiicant. 

■Two  final  simulations  snow  what  hap  to  no  when  cn_  T  -in  a  r-a* 

.  ;.sn  only  nodes  fail,  'Tnooe  omul  nor  on  3  ere  ----- - 1... 

'L  toaee  trey  givo  3  giro  indication  on  env;  mio-  t,.^c 
cation  of  the  network  design  can  Icytr  Oh-  wceeotci  or:  onion 

pairs  communicating  (EFPC).  If  a  node  fail-,  at  —  -  or- 

cannot  communicate  (all  nodes  paired  with  the  f  o^o_,  or.,,  , 
dependent  of  the  network  structure.  Thus,  good  not-  -h  do ~~i~ 
cannot  improve  the  figure  beyond  the  effect  directly  -  to  nr 
failures.  That  this  is  rather  small  can  be  seen  by  cc  _ -r_- 
the  EFPC  for  node  failures  only  with  the  EFPC  for  l_b  n  _  r 
only. 

The  situation  where  link  and  node  f *  i  ;  ire  prater: — -t; 
not  necessarily  equal  was  also  investigated. 

vO  - 
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Preliminary  data  was  available  on  the  downtime  tv 
me  coiiiiVi' 'me ul ion  linos  on  tne  Pi nP i *  nc  uw a  > 
was  naae  tn  at  the  reliability  of  a  link  in  the  n- 
linear  plus  a  constant  term  function  of  the  link 
Linear  regression  was  used  to  fit  a  function  to  ■ 
data.  Table  2.4.1.  shows  the  data  used.  The  tn 
all  taken  to  be  length  0  for  the*  regression.  Th 
chosen  was  .00293  X  +  .904  which  gives  the  pcrce 
a  function  of  the  direct  distance  X  in  miles  bet 
fit  of  the  regression  is  displayed  in  Figure  2.4 
probability  of  .03  was  assigned  to  14*0  H O ti tr o  •  X 
Labilities  for  the  links  obtained  using  the  regr 
are  displayed  in  Table  2.4.2.  The  average  failure  p 
a i.im  me  nco.es  and  xinks  w«s  r-.gure  t* 

of  the  simulation  are  displayed. 

Additionally#  some  points  plotted  wer^s  v^w'Uci 
Figure  2.4.1.  by  averaging  all  the  link  and  node 
to  obtain  a  common  failure  probability.  From  th 
we  conclude  that  for  design  purposes  tne  assumpu 
fail  with  equal  probability  is  a  good  first  nppr 
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